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SECURE SYSTEM FOR THE CONTROL OF THE^UNLOCKING OF AT 
LEAST ONE OPENABLE PANEL OF A MOtOR VEHICLE/^ 



The present invention relates to secure systems for the 
control of the unlocking of at least one openable panel 
of a motor vehicle. 

In the remote control systems which are currently used 
for unlocking motor vehicle doors, the user must 
manually actuate his remote control 

(transmission/reception device integrated into the 
gripping part of his mechanical key) in order to 
actuate the unlocking of the doors . 

Now, for greater user comfort, one wishes to eliminate 
manipulations of this type. 

So-called "hands free" systems in which the user 
carries a transponder which is, for example, integrated 
into a badge have recently been proposed. 

On receiving a radio frequency interrogation signal 
transmitted from the vehicle, the transponder transmits 
a radio frequency identification signal from itself in 
response. When this signal is received and identified 
by means provided for this purpose on the vehicle, 
these means order the unlocking of the openable panel . 

Such a system is fully transparent to the user, since 
the unlocking of the doors is controlled without the 
user having to perform operations other than that 
consisting in his having to manipulate the handle of 
his door. 




Such "hands free" systems pose security problems, 
however . 
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In particular, certain "ill-intentioned" persons may 
copy the interrogation signal transmitted from the 
vehicle so as to retransmit it near the transponder, 
even though the user carrying this transponder is 
5 somewhere far removed from the vehicle. By deploying 
suitable means near the user, they store the 
identification signal transmitted in response * by the 
transponder and retransmit this signal in the vicinity 
of the vehicle so as to obtain the unlocking of the 
10 latter' s doors. 

A purpose of the invention is to propose a solution 
making it possible to prevent deceptions of this type. 



15 Accordingly, the invention proposes a system for* the 
control of means for locking/unlocking at least one 
openable panel of a vehicle, in particular an 
automobile, comprising transmission/reception means 
which are carried by the vehicle and 

20 transmission/reception means which are intended to be 
carried by a user and which, on receipt of an 
interrogation signal transmitted by the 

transmission/reception means of the vehicle, are 
intended to transmit a response signal able to control 

25 the actuation of the unlocking of - the openable panel, 
/^characterized in that the transmission/reception means 
on the vehicle and the transmission/ reception means', of- 
the^uj3£r__ea£^ memory means forming a ^ circular ' 

sfiif t register Vn which are stored at least one and the 

3 0 ^s ame ^ pseudo- random code, the transmission/reception 
means on the vehicle comprising means for transmitting 
an interrogation signal which carries a pseudo-random 
code of this kind, the transmission/reception means of 
the user comprising means for de-spreading the signal 

35 received if the pseudo- random code carried by the said 
signal is synchronized with a corresponding pseudo- 
random code stored in their memory means and 
furthermore comprising means for transmitting a signal 
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in response which signal carries a ps.eudo- random code 
and which furthermore carries a ^igna^turej) is 
specific to the said transmissionAre'ception means of 
the user, the transmission/rece'ption means on the 
vehicle comprising means for /ae- spreading! the signal 
received if the pseudo- random code^earrie,d by the said 
signal is synchronized with a corresponding pseudo- 
random code stored in their memory means and for 
verifying whether the signal received carries the 
signature of the transmission/reception means of the 
user. 



Other characteristics and advantages of the invention 
will further become apparent from the description which 
follows which is purely illustrative and nonlimiting 
and which should be read in conjunction with the 
appended drawings, in which: 

Figure 1 is a schematic representation 
illustrating a system in accordance with the invention; 

Figure 2 illustrates the function for correlating 
t he <^p>seud o - random code s cy clicaTt y p ermu-t e d-^amongs't\ 
themselves, used in a system of the* "type "of that oV 
Figure 1 . 

Represented in Figure 1 is a vehicle V which carries RF 
transmission/reception means 1 intended to exchange 

A 

with an RF transmission/reception module 2 carried by a 
user and taking for example the form of a badge. 

The transmission/reception means 1 comprise an antenna 
3 disposed for example near a door handle of the 
vehicle, or in this handle, a management unit 5 as well 
as signal conversion means 4 interposed between the 
antenna 3 and the management unit 5 . 



WO 01/33015 



- 4 - 



The signal conversion means 4 comprise in particular 
means 6 for modulating or demodulating 'an RF signal 
transmitted or received by the antenna 3, a circular 
shift register 7 in which is stored a pseudo-random 
code, as well as mixer means 8 which are mounted 
between the management unit 5 and the said 
modulation/demodulation means 6 and which are able to 
mix the pseudo-random code with the signal demodulated 
by the means 6 or with a signal forwarded by the 
management unit 5. The pseudo-random code of the 
circular shift register 7 is cyclically permuted with 
itself at a certain clock frequency. 

The badge 2 for its part comprises an antenna 9, a 
management unit 11 and signal conversion means 10 
interposed between the antenna 9 and the management 
unit 11. 

The signal conversion means 10 comprise, in the same 
way as the means 4, means 12 for modulating or 
demodulating an RF signal transmitted or received by 
the antenna 9, a circular shift^reg-i-s-t.er 13 in which is 
stored a pseudo-random code identical to^that stored in 
the register 7, as well as m i xe r ^jnean s 14 which are 
mounted between the management unit 11 and the said 
modulation/demodulation means 12 and which are able to 
mix the pseudo- random code with the signal demodulated 
by the means 12 or with a signal forwarded by the 
management unit 11. The. pseudo-random code of the 
circular shift^regd-ster- - 1"3" Ts^cyclically permuted with 
itself at tHe^ same clock frequen cy as that of the shift 



register 7. 

The vehicle V comprises means intended to make it 
possible to detect the presence of an individual near 
the vehicle. These means 'consist for example of sensors 
disposed in the handles of the doors and making it 
possible to detect the fact that an individual is 
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a'dvancing his hand toward a handle or is actuating/the 
latter. *• 

When* the presence of an individual near the vehicle is 
detected by these means, the means 1 and the badge 2 
synchronize their' shift registers 7 and 13', for example 
loy implementing the sequence of exchanges which is 
described hereinhelow in detail, * then the' means' 1* 
transmit an RF interrogation signal. - ■ .- 

This RF interrogation signal is a signal modulated by 

the means 6 which implement, for example, a 2 -phase NRZ 

modulation. It carries the pseudo-random code stored fir 

^ * the register 7, mixed" with a "challenge" code (key 

J3 15 code) which is chosen by the management unit ,5 from 

W 'amongst several possibilities and' which will have to 

S - * 

f : s determine the response which the badge 2 will have to 

tfj give . * 



10 



20 On receipt of this signal by the antenna 9 of the badge 

O 2, it is demodulated in the reverse sense by the means 

5! 12, then mixed with the pseudo-random code of the 

ru ■ - 

q register 13 by the means 14. 



25 (If there is -c orrelation between the two pseudo-random 
codes, the management- unit 11 then receives "fronr~'tKe" 
means 14 * ^he Key code^y carried -by the RF signal 
forwarded to the badges . L c^^fP^^^ 



3 0 It will be noted that the correlation is a maximum when 
the RF * signal is^ — received by the antenna 9 
substantially concomitantly with its transmission by 
the antenna 3 3 . Com^rsely, \t is a minimum a A s soon as 
this -is no longer the case and consequently as soon as 
delays are introduced into the transmission pathway, 
this necessarily being the case when intermediate 
transmission/reception means are interposed by ill- 
intentioned persons between the vehicle and the user. 
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More exactly, the correlation value varies, as ' a 
function of the phase shift between the pseudo- random 
code carried by the signal received .and the pseudo- 
5 random code of the shift register 13, in the manner 
which is illustrated in Figure 2. It takes its maximum 
value when the two codes are perfectly synchronized and 
becomes a minimum for time shifts of at^reas't^Sne bit 
period. For time shifts of less than on e bit _period, it 
10 varies linearly between its maximum value and its 
minimum value . 

Thus, there is substantially correlation between the 
two pseudo -random codes, for as long as the code 
15 received is shifted in time by less ^■han^Katf ~ ~a^bit 
period with respect to the code of them's hi 'ft regi-s'tfer 
13 of the badge 2 . 



By way of example, the pseudo- random code can be coded 
20 on 127 bits, whilst the shift registers 7-"~"and 13 are 
traversed at a clock frequency of / 5 MH-^, this 



corresponding to bit periods of 200 ns . \sv i\ ~2^0-& * ri 



Correlations are then obtained at ± 30 m from the 
25^ vehicle, (or subsequently at 7.62 km ± 30 m or 



15.24 km ± 30 m, etc. ) 



-A 



^ Once the key code has been recovered, the management 

unit 11 determines a secret code to be transmitted in 
30 the reverse direction. This secret code is a code which 
the said vehicle V expects to receive and which is 
dependent on the key code forwarded by the vehicle V. 

This secret code is subsequently mixed with the pseudo 7 
35 random code of the shift register 13, then the signal- 
obtained is modulated by the means 10 and transmitted 
by the antenna 9 . 



WO 01/33015 



- 7 - 



On receipt of this RF signal by the antenna 3, it is 
demodulated, then mixed with the pseudo-random code of 
the shift register 7. 

The secret code is t hen r egovered^ by the management 
unit 5, if there d<s^^orrei-afe-i-on---'between the pseudo- 
random code carried by the said RF signal. On receipt 
of this secret code, the management unit 5 verifies 
that it is indeed the expected code and orders the 
unlocking of the doors if such is the case.' 

. . ..... - ; ^ 

Conversely^ when there is no correlation - ^vhich will 

be the case . if" intermediate transmission means are 

introduced , into the transmission pathway between the 

badge 2 and the vehicle V, since these intermediate 

* - » ^ ^ 

means will introduce "a ^certain * delay; between the 
pseudo- random code carrfe'd by^t-he-^RF signal and that 
"which is cyclically permuted with itself in the shift 
register 7 - the management unit 5 maintains the 
locking of the doors of the vehicle. 

As will have been understood, a system of the type of 
that just described prevents any deception by ill- 
intentioned' persons who might interpose themselves in 
the transmission pathway between the badge and the 
vehicle. It also prevents the possibility that simple 
retransmission of the pseudo-random code transmitted by 
the vehicle - would be sufficient to trigger fehe. 
unlocking of the doors', since it demands that .the 
vehicle receive a response which .carries the signature 
of the badge 2. The fact that the* response provided by 
the badge is dependent on a key code forwarded by the 
vehicle ensures a further level of security. 



Variants other than that just described are of course 
conceivable. 
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In particular, when a key code is used at the level of 
the vehicle, the latter might not be mixed with the 
pseudo-random code but consist of a pseudo- random code 
chosen from among several which are possible. Likewise, 
5 the secret code transmitted by the badge 2 might not be 
a code mixed with a pseudo- random code, but consist of 
a pseudo-random code specific to the badge 2, which 
consequently intrinsically carries the latter' s 
signature. The means 1 then comprise means, 
10 synchronized with the badge 2, which, are able to 
de-spread the signal received with this pseudo-random 
code. 

Moreover, a possible sequence for the synchronization 
15 between shift registers of the means 1 and of the badge 
2 may, be as follows. 



63 

y 

yg When the presence of an individual ' near the vehicle is 

Hi 

w 



detected, the vehicle transmits an activation signal 
20 intended to wake up the badge 2. 



5^ On receipt of this activation signal, the badge 2 

q transmits an RF signal which carries an identification 

p code mixed with a short pseudo-random signal ("short" 

H 25 to be understood in contradistinction to the 1 long 

pseudo-random signal, in this instance 127 bits long, 

used after the synchronization step) . 

The identification code is used to avoid the situation 
3 0^ in which vehicles other than the one concerned respond 
upon the activation of the badge 2. It is repeated over 
a period sufficient for the transmission/reception 
means 1 of the vehicle V to self -synchronize with the 
pseudo-random signal. 



35 



When such is the case, the transmission/reception means 
1 transmit a response signal which marks the end of the 
initialization sequence. So long as this response of 

if. 
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the vehicle is not received by the badge 2, the latter 
repeats the transmission of the signal which carries 
the identification code mixed with a short pseudo- 
random signal . 



s 

£9 
09 

y 



w 

Q 

cn 
ru 

o 



5 



